G2

Roberto R.

CEO & Solutions Architect

Information Technology and Services

Small-Business (50 or fewer emp.)

5/14/2026

"Telemetry that makes the storage estate auditable for the SOC - predictive, SaaS-native"

4.5/5

What do you like best about IBM Storage Insights?

What makes IBM Storage Insights stand out is that it turns the IBM storage estate from a set of boxes-and-arrays into a continuously observed, predictive system — without forcing any new agent infrastructure into the customer's network. In our enterprise deployment for an Italian multinational in medical and industrial gases (FlashSystem 7600 with 14× FCM5 modules, dedicated cyber-vault data center, Copy Services Manager orchestration), Storage Insights Pro became the single pane of glass the customer's storage and security teams actually trust.

Three things drive that trust from the field. First, the predictive monitoring is genuinely actionable: capacity trends, performance baselines and anomaly signals are surfaced as forecasts, not after-the-fact charts. The customer's team intercepted two saturation events before they hit production, with weeks of runway to plan remediation. Second, the SaaS-native architecture means there's no on-premise dashboard server to patch and maintain — the secure data collector inside the customer perimeter forwards telemetry over TLS without exposing the array management interfaces. For a regulated customer this collapses an audit conversation we used to have to defend every quarter.

Third, and most importantly, the integration with the rest of the IBM Storage portfolio is genuine. FCM5 hardware-level ransomware-pattern signals on the FlashSystem 7600 backend flow into Storage Insights Pro and from there into the customer's SIEM via webhook — the SOC sees the same signal the storage team sees, on the same console, in the same minute. That is the operational maturity inflection point: cyber-resilience stops being a storage-team concern and becomes a shared signal layer. Review collected by and hosted on G2.com.

What do you dislike about IBM Storage Insights?

Two honest critiques from delivery. First, the entitlement matrix between Storage Insights (free tier), Storage Insights Pro, and add-on capabilities tied to specific FCM hardware can be confusing for the customer's procurement and security teams in early conversations. Some advanced features (longer history retention, forecasting depth, ransomware-pattern alerting on FCM5) require Pro entitlement: a cleaner positioning of what's free vs licensed would shorten pre-sales cycles measurably.

Second, the SIEM integration documentation is solid for IBM QRadar but more effort is required for third-party SIEMs (Splunk, Sentinel, Elastic). We assembled the webhook + payload mapping ourselves for one customer's non-IBM SIEM stack — a consolidated "integration cookbook" for the top three external SIEMs would be a high-value addition.

Neither of these is a blocker — once configured, Storage Insights is reliable and self-maintaining. They're the friction points a partner team should anticipate when scoping a delivery. Review collected by and hosted on G2.com.

What problems is IBM Storage Insights solving and how is that benefiting you?

For our customer the storage estate had grown across two data centers, several generations of IBM arrays, and a hybrid mix of block and file workloads. Before Storage Insights Pro, the storage team's visibility was a patchwork of native array UIs, scripts, and quarterly capacity reports — none of which the SOC could ingest and none of which the audit team accepted as evidence of proactive control.

Storage Insights solves three problems at once. (1) Consolidated, predictive visibility across all IBM arrays in scope — capacity forecasting, performance baselines, configuration drift surfaced in one view. (2) Auditable reporting that the customer's compliance team uses directly in NIS2 and GDPR documentation packages: time-to-detect, configuration baseline drift, encryption posture, and ransomware-pattern signals all exportable in formats the auditors accept. (3) SOC-grade telemetry routed to the customer's SIEM, so storage signals finally appear alongside network and endpoint signals in the same incident timeline.

From a partner perspective the value is collapsed integration effort: we deploy the secure data collector once, configure the alert routes once, and the customer gets a permanent observability layer instead of a one-off project deliverable. The customer's storage and security teams now hold a joint weekly review with one common dashboard — that operational maturity is the real ROI of Storage Insights. Review collected by and hosted on G2.com.